Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RQ92u74VFcMomA_hodnH25PoE-E.roa
File:                     RQ92u74VFcMomA_hodnH25PoE-E.roa (raw, json)
Hash identifier:          RHDHAMaLnHm5roG674ZjFccPouAMIAneycPxryAWfIA=
Subject key identifier:   45:0F:76:BB:BE:15:15:C3:28:98:0F:E1:A1:D9:C7:DB:93:E8:13:E1
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01889B205524CEAA56AA2467AD68404DD4F9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RQ92u74VFcMomA_hodnH25PoE-E.roa
Signing time:             Thu 08 Jun 2023 13:09:27 +0000
ROA not before:           Thu 08 Jun 2023 13:09:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:9b:20:55:24:ce:aa:56:aa:24:67:ad:68:40:4d:d4:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jun  8 13:09:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=450f76bbbe1515c328980fe1a1d9c7db93e813e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e5:a2:4e:2c:af:2c:e7:05:53:ba:18:2f:54:
                    79:51:a8:8e:83:88:1f:e4:90:aa:42:03:f1:44:ac:
                    77:75:11:d3:c0:f6:1c:e3:45:2b:20:00:95:01:42:
                    b4:99:03:c9:41:6c:e2:22:62:12:8b:d9:a2:73:40:
                    35:5b:ea:be:1d:8e:6c:a6:34:ff:23:4a:0d:52:31:
                    18:50:30:2e:10:7f:b0:4d:0b:f8:5e:43:2e:28:c0:
                    fa:27:76:0f:02:4c:45:81:5c:92:3a:5c:4c:4f:a1:
                    8d:51:d9:e7:03:e1:82:35:87:30:0d:2f:7d:c7:29:
                    0c:5c:4a:86:78:82:3e:b5:a1:f3:5f:c2:ec:4c:23:
                    cb:29:d1:6c:99:cf:a1:5a:92:fd:38:e6:64:dd:05:
                    05:d5:ae:c0:57:d0:15:7e:f7:18:57:98:77:8f:b9:
                    b4:7c:cb:51:59:46:d6:08:44:0f:75:8b:86:d4:b4:
                    7c:ff:5b:bb:1d:db:55:67:df:60:61:b5:38:c5:58:
                    34:1c:e3:19:4a:7d:6d:d2:e7:82:a8:38:b3:97:89:
                    fc:bc:6d:b7:5e:5e:85:14:c6:5e:c3:55:7d:92:67:
                    6b:05:ba:24:33:20:d1:40:12:17:a0:b9:2d:06:92:
                    6b:16:37:7f:92:e6:a7:2a:f4:ef:43:1b:2f:e7:24:
                    cd:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:0F:76:BB:BE:15:15:C3:28:98:0F:E1:A1:D9:C7:DB:93:E8:13:E1
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RQ92u74VFcMomA_hodnH25PoE-E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:86:13:91:93:10:88:20:ec:7f:49:3c:67:3c:62:aa:84:d9:
         4e:6b:c6:fb:f3:88:b5:87:55:56:4b:d8:1f:b4:13:10:24:af:
         ce:cb:77:a6:f4:42:94:26:9a:90:43:06:87:d7:6c:38:3e:ac:
         2b:5f:9d:2e:54:7a:00:b4:c7:de:93:8d:7f:d9:62:56:a5:c6:
         33:86:b9:cc:f9:e6:fe:23:57:f1:ec:c8:a0:cc:0a:94:12:b0:
         0f:ab:a3:62:7c:8c:97:96:57:77:9c:9b:5c:b5:68:eb:1d:8e:
         5f:dc:ad:23:1b:e6:59:0e:22:4f:3d:42:4b:48:f8:1a:2f:19:
         e6:94:6c:d5:3c:21:e3:b9:1b:75:ea:b0:d9:88:7d:f3:b5:69:
         81:1a:a7:04:35:82:15:78:5b:8c:fd:29:85:bf:99:e6:75:18:
         a4:9e:aa:b9:00:5c:9c:a9:87:bc:74:20:ae:c5:ad:46:42:b5:
         9f:e4:83:ec:82:cf:ed:84:8c:58:bf:11:e1:5b:f2:49:41:ba:
         1c:37:e5:f7:d7:21:f4:77:4f:7d:4a:64:0d:39:a8:b7:39:60:
         c2:65:b1:b0:1e:66:53:f1:1d:62:cd:be:a4:c3:6a:da:86:26:
         d2:9d:88:4f:5f:ea:bc:1b:fe:24:c8:a3:a6:4c:5c:ec:98:5c:
         da:20:88:29
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYibIFUkzqpWqiRnrWhATdT5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjA4MTMwOTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTBmNzZiYmJlMTUxNWMzMjg5ODBmZTFhMWQ5YzdkYjkzZTgxM2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOWiTiyvLOcFU7oYL1R5UaiOg4gf
5JCqQgPxRKx3dRHTwPYc40UrIACVAUK0mQPJQWziImISi9mic0A1W+q+HY5spjT/
I0oNUjEYUDAuEH+wTQv4XkMuKMD6J3YPAkxFgVySOlxMT6GNUdnnA+GCNYcwDS99
xykMXEqGeII+taHzX8LsTCPLKdFsmc+hWpL9OOZk3QUF1a7AV9AVfvcYV5h3j7m0
fMtRWUbWCEQPdYuG1LR8/1u7HdtVZ99gYbU4xVg0HOMZSn1t0ueCqDizl4n8vG23
Xl6FFMZew1V9kmdrBbokMyDRQBIXoLktBpJrFjd/kuanKvTvQxsv5yTNVQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEUPdru+FRXDKJgP4aHZx9uT6BPhMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvUlE5MnU3NFZGY01vbUFfaG9kbkgyNVBvRS1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFWGE5GTEIgg7H9JPGc8
YqqE2U5rxvvziLWHVVZL2B+0ExAkr87Ld6b0QpQmmpBDBofXbDg+rCtfnS5UegC0
x96TjX/ZYlalxjOGucz55v4jV/HsyKDMCpQSsA+ro2J8jJeWV3ecm1y1aOsdjl/c
rSMb5lkOIk89QktI+BovGeaUbNU8IeO5G3XqsNmIffO1aYEapwQ1ghV4W4z9KYW/
meZ1GKSeqrkAXJyph7x0IK7FrUZCtZ/kg+yCz+2EjFi/EeFb8klBuhw35ffXIfR3
T31KZA05qLc5YMJlsbAeZlPxHWLNvqTDatqGJtKdiE9f6rwb/iTIo6ZMXOyYXNog
iCk=
-----END CERTIFICATE-----
Generated at Mon Jun 9 19:37:52 2025 by rpki-client